This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa File: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (raw, json) Hash identifier: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4= Subject key identifier: B7:0D:92:F9:10:34:FC:8B:C3:E7:27:4D:05:33:E7:35:A5:FD:0E:EC Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 6363D9F49FD85BE9EC4B647442CB713E41A991E8 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 142146 IP address blocks: 194.247.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:63:d9:f4:9f:d8:5b:e9:ec:4b:64:74:42:cb:71:3e:41:a9:91:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=B70D92F91034FC8BC3E7274D0533E735A5FD0EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:8c:bc:b3:66:b9:e3:45:85:2c:55:95:63: 60:75:53:39:81:e2:51:dc:6a:4a:59:45:3a:be:e2: 0d:47:05:65:36:f4:ca:f1:66:69:14:d1:55:64:46: ea:50:12:48:a8:35:ae:57:d4:22:e9:81:d1:b5:00: 8a:e6:39:d2:8f:1f:c4:a2:35:a2:4c:97:20:a1:48: c2:77:62:0e:fd:ff:a4:1e:08:88:a7:50:37:7a:06: c5:59:29:1b:bd:31:f7:94:fd:96:71:2d:1a:79:ed: fa:01:37:f8:0b:72:c4:93:3f:0f:fc:2f:d4:21:20: 6a:6a:c7:87:02:cf:38:f7:c0:2b:8a:ba:68:34:4f: 62:ca:34:92:d9:db:42:44:09:80:c2:91:13:68:05: f4:bf:c0:b3:0a:98:79:e7:59:cb:3b:6e:fe:2a:f6: 58:29:ef:6a:f1:74:fa:cb:5c:9a:2d:72:9c:51:66: f0:8b:46:4d:c8:82:d2:b6:fe:ce:72:2e:ba:b1:54: c0:d7:8e:c2:a8:8d:8d:d2:a5:72:43:ca:bd:5b:e8: 15:ac:c1:73:f7:6d:d0:37:5e:1a:84:7c:61:fb:c2: 77:e3:ba:83:b4:cc:e9:75:d4:30:43:95:43:a7:ad: e5:b5:6d:0f:f6:c3:34:e5:83:21:f6:8c:ff:3a:cb: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0D:92:F9:10:34:FC:8B:C3:E7:27:4D:05:33:E7:35:A5:FD:0E:EC X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.44.0/24 Signature Algorithm: sha256WithRSAEncryption 73:38:d3:8b:f2:7a:a0:bb:9f:5e:a5:94:0c:8c:68:01:75:b2: 8d:ca:b1:4d:3a:83:be:05:ea:33:c6:31:8b:c3:9e:09:1c:79: ca:cf:9c:82:18:28:ac:dc:28:67:26:b5:d6:dc:85:57:c9:be: 5c:c4:64:60:45:af:25:6e:36:40:70:11:e4:98:7c:d0:40:ad: 59:98:dd:7d:dd:1f:ed:d0:ad:99:db:7e:85:de:02:ef:ed:91: 2b:03:c2:6a:1c:e0:e6:ef:44:5a:3f:d1:7e:18:33:f9:1f:51: 58:25:2f:bd:b0:1d:61:a5:e3:4b:dc:4b:4f:4e:0b:2c:0a:0d: 87:11:1d:1d:63:41:46:b9:0b:21:82:4a:2f:07:85:45:5d:75: 1c:33:6a:2b:98:3e:7c:95:fa:3a:ca:25:dc:7f:a4:4a:8b:03: 7a:42:bb:08:f8:c6:2f:4f:9d:63:b9:de:72:5a:49:3a:8b:16: 37:44:a5:51:e0:69:22:e5:e1:9f:66:e3:c9:eb:94:a5:eb:e7: eb:62:59:70:db:aa:2b:c6:ba:f3:7c:34:a1:c7:dd:bc:c0:c6: e4:b4:ec:52:c3:38:26:44:7a:6c:05:09:f7:15:69:cf:ed:86: 00:4e:62:ca:3a:49:6f:30:e3:58:07:26:56:09:fd:63:3b:4a: da:cf:06:21 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUY2PZ9J/YW+nsS2R0QstxPkGpkegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKEI3MEQ5MkY5MTAzNEZDOEJDM0U3Mjc0RDA1MzNFNzM1QTVGRDBFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3Yy8s2a540WFLFWVY2B1UzmB 4lHcakpZRTq+4g1HBWU29MrxZmkU0VVkRupQEkioNa5X1CLpgdG1AIrmOdKPH8Si NaJMlyChSMJ3Yg79/6QeCIinUDd6BsVZKRu9MfeU/ZZxLRp57foBN/gLcsSTPw/8 L9QhIGpqx4cCzzj3wCuKumg0T2LKNJLZ20JECYDCkRNoBfS/wLMKmHnnWcs7bv4q 9lgp72rxdPrLXJotcpxRZvCLRk3IgtK2/s5yLrqxVMDXjsKojY3SpXJDyr1b6BWs wXP3bdA3XhqEfGH7wnfjuoO0zOl11DBDlUOnreW1bQ/2wzTlgyH2jP86y499AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUtw2S+RA0/IvD5ydNBTPnNaX9DuwwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzMjM0MzcyZTM0 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMTM0MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADC9ywwDQYJKoZIhvcNAQELBQADggEBAHM404vyeqC7n16llAyMaAF1so3KsU06 g74F6jPGMYvDngkcecrPnIIYKKzcKGcmtdbchVfJvlzEZGBFryVuNkBwEeSYfNBA rVmY3X3dH+3QrZnbfoXeAu/tkSsDwmoc4ObvRFo/0X4YM/kfUVglL72wHWGl40vc S09OCywKDYcRHR1jQUa5CyGCSi8HhUVddRwzaiuYPnyV+jrKJdx/pEqLA3pCuwj4 xi9PnWO53nJaSTqLFjdEpVHgaSLl4Z9m48nrlKXr5+tiWXDbqivGuvN8NKHH3bzA xuS07FLDOCZEemwFCfcVac/thgBOYso6SW8w41gHJlYJ/WM7StrPBiE= -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:34 2025 by rpki-client